ROOTPLOIT
Server: Apache
System: Linux node6122.myfcloud.com 6.14.3-x86_64-linode168 #1 SMP PREEMPT_DYNAMIC Mon Apr 21 19:47:55 EDT 2025 x86_64
User: bashacomputer (1004)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system
Upload Files
File: //scripts/cleanupmysqlprivs
#!/bin/bash

BINARY=$(which mysql 2>/dev/null)
[[ -h $BINARY || -z $BINARY ]] && BINARY=$(which mariadb)

echo -n "Cleaning up mysql privs.  Please ignore errors about non-existent columns as you may have an older version of mysql....."

$BINARY -v -f mysql <<EOM
UPDATE user SET Create_priv='N'           WHERE Create_priv='Y'           AND User != 'root';
UPDATE user SET Create_tmp_table_priv='N' WHERE Create_tmp_table_priv='Y' AND User != 'root';
UPDATE user SET Lock_tables_priv='N'      WHERE Lock_tables_priv='Y'      AND User != 'root';
UPDATE user SET Execute_priv='N'          WHERE Execute_priv='Y'          AND User != 'root';
EOM

ADMIN=$(which mysqladmin 2>/dev/null)
[[ -h $ADMIN || -z $ADMIN ]] && ADMIN=$(which mariadb-admin)

$ADMIN reload

echo "Done."